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ABSTRACT 



An IC card 30, which is employed to permit the exchange of 
secret information while ensuring that security is 
maintained, includes: a ROM 38 in which an ID is held; a 
clock 42; a RAM 40 in which a password is stored; a RAM 
36 in which a ciphering program is stored; and a CPU 34 that 
executes a process. The ciphering program is loaded, the 
stored ID, password and the time t measured by the clock 42 
are read and encoded in accordance with the ciphering 
program, and the results are outputted to a computer system 
10. The computer system 10 decodes the output from the IC 
card 30 and extracts a password, and compares the decoded 
password with a registered password. When the passwords 
match, access is enabled; but when they do not match, access 
is disabled. 

6 Claims, 7 Drawing Sheets 
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IC CARD AND AUTHENTICATION METHOD 
FOR INFORMATION PROCESSING 
APPARATUS 

BACKGROUND OF THE INVENTION 5 

1, Field of the Invention 

The present invention relates to an IC card, and an 
authentication method for an information processing appa- 
ratus; and in particular to an IC card that can be connected 10 
to an information processing apparatus, such as a computer 
or a terminal, and an authentication method for an informa- 
tion processing apparatus, by which the above IC card is 
employed to authenticate a mutual connection between the 
IC card and the information processing apparatus. 15 

2. Related Art 

A terminal device connected to a network, a stand-alone 
microcomputer that can independently execute applications, 
a portable microcomputer, etc. (hereinafter referred to as an 
information processing apparatus), together are known as an 20 
apparatus that processes data produced by users. Such an 
information processing apparatus is so designed that it can 
be employed by a plurality of users. Although a specific 
process can be performed by an information processing 
apparatus, information (hereinafter referred to as secret 25 
information), such as personal telephone numbers or iden- 
tification numbers, that is highly confidential and should not 
be revealed to other persons may be stored in the informa- 
tion processing apparatus. Thus, security for such a system 
is required so that secret information can not be obtained by 30 
users other than those to whom it is registered. 

With one conventional example, which is shown in FIG. 
6A, security is maintained by permitting an information 
processing apparatus to perform a process only when a 
match is obtained between a password input and a password 35 
previously registered. For example, when network access is 
sought by a terminal device on a network, the network issues 
a request to the terminal device for the input of a password, 
and grants access permission only when the password input 
matches one that was previously registered. Acash dispenser 40 
(automatic teller machine) is another well known informa- 
tion processing example. To make a withdrawal from a cash 
dispenser, a cash card must be inserted into the cash 
dispenser, and an identification number, which corresponds 
to a password and which was previously registered, must 45 
then be input. 

If third persons can obtain passwords, however, it is 
possible for anybody to execute a process on an information 
processing apparatus. To prevent that, passwords may be 5Q 
updated periodically. When, however, the concern for secu- 
rity results in the setting of a too short time period for the 
updating of passwords, the burden placed on users is large. 
But if the update period is extended in order to reduce the 
load on the users, the chance that security will be endan- 55 
gered is increased. 

To resolve this problem, as is shown in FIG. 6B, a 
physical device (a hard wire key: H/W key) may be required 
to be added to the information processing apparatus before 
a process can be executed by the information processing 60 
apparatus. As a result, the execution of the process by the 
information processing apparatus is permitted only when the 
physical device is provided. 

With a process that is well known as reverse engineering, 
however, it is relatively easy to produce an identical copy of 65 
such a physical device. For example, for a physical device 
that incorporates a ROM, and performs an authentication 
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procedure in accordance with data entered in the ROM, a 
like device can be produced simply by copying the data from 
the ROM. For a physical device constituted by a logical 
circuit, etc., a comparable device can be produced by 
detecting an output signal. In this manner, if the same 
physical device can be produced, anyone can execute a 
process for an information processing apparatus. 

As the latest development by the information industry, 
well known is an I C card, such as a memory card and an LSI 
card on which fixed data can be held, that has a miniaturized 
processor, which is an independent external device con- 
nected by a cable, that is connected to a terminal to function 
as an external connection device. 

A terminal confirmation method is a method by which the 
IC card is employed to confirm hardware, or a component of 
a communication system, for the purpose of ensuring the 
security and the protection of communication (see Japanese 
Examined Patent Publication No. Hei 4-51864). With this 
method, a secret number, such as a password stored on a 
memory card, is employed as a key and is used for the 
encoding at a first terminal of random numbers that are 
output to a second terminal. The second terminal decodes 
the encoded numbers (random numbers) by using a key 
stored in advance. When the keys at the two terminals are 
identical, the random numbers are generated, and the induc- 
tive form of the random numbers is employed to encode the 
key. Thus, a response is generated and is output to the first 
terminal. Then, the first terminal employs the random num- 
bers as a key to determine whether or not the response was 
produced by encoding the key. When the response yields the 
encoded key, the second terminal is confirmed. When the 
response does not yield the encoded key, the terminal is not 
confirmed and communication is halted. 

However, for the conventional terminal confirmation 
method, the keys on a card and at a terminal are fixed, and 
if a key, which corresponds to a password, is known to third 
persons, everybody can execute a process performed by an 
information processing apparatus. As is described above, 
therefore, in the interests of security keys must be updated 
within short intervals, and the burden placed on users is 
increased. 

SUMMARY OF THE INVENTION 

To overcome this shortcoming, it is one object of the 
present invention to provide an IC card with which highly 
confidential information can be exchanged while ensuring 
the maintenance of security, and an authentication method 
for an information processing apparatus. 

To achieve the above object, according to the present 
invention, an IC card, which can be connected to an infor- 
mation processing apparatus, comprises: a clock for count- 
ing time; ID storage means for storing an ID that represents 
inherent information determined in advance; secret infor- 
mation storage means for storing secret information to 
identify the IC card when the IC card is connected to the 
information processing apparatus; procedure storage means 
for at least storing an encoding procedure for encoding the 
secret information; and control means for at least encoding 
the secret information in accordance with the encoding 
procedure stored in the procedure storage means. The secret 
information that is used to identify the IC card is an ID 
number and a password. The encoding procedure is a 
ciphering program and an encoding program. 

A plurality of procedure storage means may be provided 
wherein a plurality of encoding procedures for encoding the 
secret information are stored. In this case, the control means 



03/30/2004, EAST Version: 1.4.1 



5,81 

3 

selects one of the encoding procedures stored in the indi- 
vidual procedure storage means, and encodes at least the 
secret information according to the selected encoding pro- 
cedure. 

An authentication method for an information processing 
apparatus according to the present invention employs the 
above described IC card, and authenticates a mutual con- 
nection between the I C card and the information processing 
apparatus, in which the secret information is registered in 
advance. 

The information processing apparatus outputs to the IC 
card the secret information registered in advance, and the 
encoding procedure. The secret information and the encod- 
ing procedure are then read and stored on the IC card. At this 
time, with respect to the information processing apparatus, 
the IC card serves as a key for authentication of a mutual 
connection. The stored secret information, ID information, 
and a time count performed by a clock are read from the IC 
card. The reading time, the secret information, and the ID 
information are inherent information to the IC card. The 
reading time, the secret information, and the ID information 
are encoded in accordance with the stored encoding 
procedure, and the resultant information is output to the 
information processing apparatus. Therefore, the informa- 
tion input to the information processing apparatus is special 
information obtained by encoding current information that is 
inherent to the IC card. 

Upon the receipt of the information from the IC card, the 
information processing apparatus decodes it in accordance 
with a decoding procedure that corresponds to the encoding 
procedure. Since the IC card is regarded as authentic if the 
decoded secret information is a response output from the 
information processing apparatus, when the decoded secret 
information matches the secret information registered in 
advance, the mutual connection is confirmed. 

The secret information and the encoding procedure can be 
altered in accordance with instructions from the IC card side 
issued at periodical intervals based on the time count per- 
formed by the clock. 

In this context, the IC card may have a clock, and can 
itself perform a time count for a period within which the 
secret information and the encoding procedure should be 
altered. Thus, to ensure security, the secret information and 
the encoding procedure can be altered at periodical intervals, 
determined in advance, without a long time elapsing. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a schematic block diagram illustrating a com- 
puter system and an IC card according to one embodiment 
of the present invention. 

FIG. 2 is a flowchart for a process performed by the 
computer system. 

FIG. 3 is a flowchart for a process performed by the IC 
card. 

FIG. 4 is a flowchart for a time expiration process. 
FIG. 5 is a flowchart for an automatic update process. 
FIGS. 6A and 6B are diagrams of conventional security 
systems. 

FIG. 7 is a perspective view of the external appearance of 
the IC card. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

One embodiment of the present invention will now be 
described in detail while referring to the drawings. The 
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present invention is applied for a case wherein a computer 
system, which serves as an information processing 
apparatus, exchanges data with an IC card that is requesting 
permission (for process execution) to access the computer 
5 system. 

As is shown in FIG. 1, the arrangement that employs an 
authentication method for an information processing appa- 
ratus according to the embodiment comprises a computer 
system 10 and an IC card 30. The computer system 10 is 

10 constituted by a CPU 12, a RAM 14, a ROM 16, a storage 
device 18, a keyboard 20, a CRT 22, an input/output (I/O) 
device 24, and a bus 26 that connects these components so 
that they can exchange commands and data with each other. 
The storage device 18 stores a ciphering program for per- 

15 forming a predetermined encoding process, which will be 
described later. A registered password is also stored therein. 

The IC card 30 has an input/output unit (I/O) 32, which 
is connected to the input/output device 24 of the computer 
system 10. The input/output unit 32 of the IC card 30 is 

2 0 connected via a bus 44 to a CPU 34, which is an operation 
unit. The CPU 34 is connected via a bus 46 with a nonvola- 
tile RAM 36, which will be described later, that is a program 
memory wherein an encoding program is temporarily stored. 
The CPU 34 is also connected via a bus 48 with a ROM 38 

25 stored inherent data that are recorded when the IC card 30 
is manufactured, a nonvolatile RAM 40 wherein a password 
is stored, and a clock 42 that serves as an incorporated clock. 
Inherent data to the IC card 30, e.g., a serial number and an 
ID, such as a label, that represents the type of the IC card, 

30 are written in the ROM 38 during the manufacturing pro- 
cess. 

The IC card 30 in this embodiment comprises the input/ 
output (I/O) unit 32, the CPU 34, the RAM 36, the ROM 38, 
the RAM 40, and the clock 42, which are the essential 

35 components, and further comprises a keyboard 50, which is 
input means for entering a password, and a display 52, which 
is display means for displaying data and commands. The 
keyboard 50 and the display 52 are connected to the bus 48. 
Since the IC card 30 has the keyboard 50, the input of a 

40 password, commands, and data can be performed by using 
the IC card 30. And as the IC card 30 has the display 52, a 
password, commands, and data on the IC card can be 
confirmed. The keyboard 50 and the display 52 are not 
necessarily required for the IC card 30, and only the key- 

45 board 50 or the display 52 may be provided. Further, a 
keyboard 20 for the system 10 may be used for inputting a 
password, etc., and a CRT 22 may be used for displaying the 
input data for confirmation. 

FIG. 7 is a perspective view of the example external 

50 appearance of the IC card 30. The IC card 30 in FIG. 7 is a 
detachable credit card size (a so-called PCMCIA card: an 
expansion card that conforms to the PCMCIA standards). 
The input/output unit 32, the CPU 34, the RAM 36, the 
ROM 38 the RAM 40, and the clock 42 are incorporated in 

55 a casing 30A. On the top surface of the casing 30A are 
provided the keyboard 50, which consists of a plurality of 
button switches that correspond to the alphabet letters and 
numbers, and the display 52, which is formed from an LCD 
unit. A terminal 32A is provided on the side of the casing 

eo 30A, and serves as a connection terminal to connect the 
input/output unit 32 to an external device. The IC card 30 
can also be inserted into a card slot (not shown) provided on 
the computer system 10, and the terminal 32A is connected 
to a terminal (not shown) in the card slot. 

65 The authentication procedure performed, between the 
computer system and the IC card will now be described 
while referring to FIGS. 2 and 3. 
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As is shown in FIG. 2, at step 102, the computer system the IC card 30. When the IC card 30 outputs the information, 

10 determines whether or not the input/output unit 32 of the the result at step 106 in FIG. 2 becomes affirmative and 

IC card 30 is connected to the input/output device 24 to program control advances to step 108. At step 108, the 

ascertain whether or not the IC card 30 is inserted into the information output by the IC card 30 is read and a decoding 

computer system 10. When the result at step 102 is 5 process is performed. Through this process, a password 

affirmative, i.e., the IC card 30 is inserted, program control included in the output information can be extracted. More 

advances to step 104, whereat a password, which has been specifically, the information received from the IC card 30 is 

registered and stored in the storage device 18, and a cipher- the information (random numbers) obtained by means of the 

ing program are read and output to the IC card 30. ciphering program (the process in which expression (1) is 

The IC card 30 repeals the procedure at step 202 until a io used in this embodiment), which was output to the IC card 

signal from the computer system 10 is input. When a signal 30 at step 104. The decoding process is thus easy to perform, 

from the computer system 10 (at step 104 in FIG. 2) is input, and for example, can be performed by using an inverted 

the result at step 202 is affirmative, and program control function of expression (1). The computer system 10 may 

advances to step 204. At step 204, a password output by the store in advance a decoding program for decoding informa- 

computer system 10 and a ciphering program are received. 15 tion generated by a ciphering program. 

The password is stored in the RAM 40, while the ciphering At step 110, a check is performed to determine whether or 

program is stored in the RAM 36. Then, the stored ciphering not the password obtained through the decoding process 

program is read so that it can be executed (i.e., the ciphering matches the registered password. When the passwords 

program is loaded). match, and thus the result at step 110 is affirmative, at step 

When the above process has been completed, the IC card 20 112 access to the computer system 10 is permitted. That is, 

30 serves as a security key. More specifically, at this stage the process using the computer system 10 can be performed, 

the IC card 30 can output a password in accordance with the For example, when the computer system 10 is connected to 

password and the ciphering program, which will be a network and the IC card 30 is used to access the network, 

described later, and thus serves as a system that is equivalent the above condition corresponds to the obtaining of an 

to a computer system that mounts a hard wired device. 25 access right at the log-on time. 

Since the IC card 30 in this embodiment has the keyboard When the passwords do not match, and the result at step 

50, a password can be also input at the keyboard 50. In this HO is therefore negative, at step 114 access to the computer 

case, at step 104 in FIG, 2, only the ciphering program is system 10 is disabled, and program control is forcibly 

output. At step 204 in FIG. 3, the ciphering program output terminated without the following process being performed, 

by the computer system 10 is received and is stored in the 30 In other words, the power is turned off or a warning is 

RAM 36. Although not shown, a password input process is displayed. 

added before or after the procedure at step 204 in FIG. 3. The It is preferable that the password and the ciphering 

password input at the keyboard 50 of the IC card 30 is stored program be periodically updated and new ones provided, 

in the RAM 40. The password in this case may be displayed An explanation will now be given for a case wherein the 

on the display 52. To ensure that security is adequate, 35 above process has been completed, and the IC card 30 is 

masking may be performed whereby symbols are displayed removed from the computer system 10 and is then loaded 

only to indicate that there has been input. again. Since the password and the ciphering program have 

At step 206, the ID stored in the ROM 38, the password been transmitted from the computer system 10 to the IC card 

stored in the RAM 40, and the time t measured by the clock 30, the procedure at step 104 in FIG. 2 for the computer 

42 are read. At step 208, as is explained below, the ID, the 4 0 system 10, and the procedure at step 204 in FIG. 3 for the 

password and the time t are encoded in accordance with the IC card 30 are not required. Instead of the procedure at step 

ciphering program to generate information. At step 210, the l** 4 , the computer system 10 executes a password reference 

generated information is output to the computer system 10, process. More specifically, the computer system 10 instructs 

It should be noted that the generated information may also *e IC card 30 to output information generated for the stored 

be output to the computer system 10 upon the request of the 45 ID > tne slored password, and the stored time t. The procedure 

computer system 10. al ste P 204 is skipped for the IC card 30. When the IC card 

An example encoding process performed at step 208 will 30 15 inserted ^ the computer system 10, the computer 

now be described. In this embodiment, password P from the s y stem 10 instructs the IC card 30 to output the information 

computer system 10, an ID which is inherent information to ^ IC card 30 out P uts the generated information to the 

the IC card 30, and time t which is measured by the clock 50 computer system 10. Apassword included in the information 

are employed to encode a password. The password P, the ID lhat 1S out P ul b y lhe IC card 30 * compared with the 

and the time t are encoded according to the following registered password. When the passwords match, access to 

expression (1) to obtain output information G. thc computer system 10 is permitted. 

Since the IC card 30 in this embodiment has the keyboard 

g-rnd{f<p, ID, t)} (i) 55 5Q the keyboard 50 can be used to input a password as 

F: a function that is a combination of addition, subtraction, necessary. In this case, instead of the procedure at step 204 

multiplication and division, and RND: a random function in FIG. 3, a password input process is performed. The 

(used in a general programming language). password input at the keyboard 50 of the IC card 30 is stored 

In this manner, the IC card 30 obtains random numbers by in the RAM 40. Therefore, when the IC card 30 is inserted 

encoding the password and transmits them as output infor- 60 into the computer system 10, a request for information 

mation to the computer system 10. output is transmitted from the computer system 10 to the IC 

It is preferable that the time required by the computer card 30. Upon receipt of this request, the IC card 30 

system 10 substantially match the time measured by the performs the password input process, and outputs generated 

clock in order for the identity process to be performed more information to the computer system 10. The password 

efficiently. 65 included in the information that is output by the IC card 30 

The computer system 10 repeats the procedure at step 106 is compared with the registered password. When the pass- 
in FIG. 2 until a signal (output information) is transmitted by words match, access to the system is permitted. 
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As is described above, in this embodiment, since the CPU 
and the RAM for storing the ciphering program are included 
in the IC card 30, the IC card itself can perform an encoding 
process. Therefore, an encoded password, which is secret 
information, can be output. And as the secret information 
can not be read simply by detecting the output signal from 
the IC card 30, the security is improved. Further, since the 
nonvolatile RAM in which the program is temporarily held 
is employed as a device for storing the ciphering program, 
the ciphering program can be altered. Even if the program is 
physically copied by the use of reverse engineering, since 
the program is only temporary and is not used continuously, 
enhanced security is provided. 

In the above embodiment, as the IC card 30 has the clock 
42, the IC card can measure time. Thus, an effective period 
for a password stored on the IC card 30 can be set. An 
explanation for the effective period setting process will be 
given. It should be noted that the time at which a password 
is registered or is updated is stored together with the 
password. It should be further noted that the effective period 
is set by the computer system 10 in advance, or else a 
predetermined time is set before registration. 

In FIG. 4 is shown an interrupt routine performed by the 
IC card 30 each time a predetermined time has elapsed. At 
step 222 in FIG. 4, the clock 42 is read and a current time 
is detected. At step 224, the previous update time or the 
registration time is read. The registration time is stored in the 
RAM 40 wherein the password is also stored. At step 226, 
the current time that is read is compared with the update time 
or the registration time, to determine whether or not the 
predetermined time has elapsed. When the result is negative, 
and the predetermined time has not yet elapsed, this routine 
is terminated. When the result is affirmative, at step 228, a 
time expiration process is performed. The time expiration 
process includes an inhibiting process for inhibiting the use 
of the IC card 30 and a process for notifying the computer 
system 10 of the time expiration when the IC card 30 is 
inserted in the computer system 10. If a display device is 
added to the IC card 30, it is possible to display a warning 
that a predetermined time has elapsed since the password 
was registered or updated. In addition, it is also possible for 
the computer system 10 to display a warning when the IC 
card 30 is connected to the computer system 10. 

Since the IC card 30 has the clock 42 and the nonvolatile 
RAM 36 for storing the program, the IC card 30 itself can 
measure time and can also update the password. That is, 
when a predetermined time has elapsed, a password updat- 
ing process can be automatically performed for a password 
stored on the IC card 30. An explanation for the password 
updating process will be given. It should be noted that the 
time at which the password was registered or updated is 
stored with the password. It should also be noted that an 
effective period is set by the computer system 10 in advance, 
or that a predetermined time is set as the effective period at 
the time of registration. 

In FIG. 5 is shown an interrupt routine performed by the 
IC card 30 each time a predetermined time has elapsed. At 
step 222 in FIG. 5, the clock 42 is read and a current time 
is detected, as in the process in FIG. 4. At step 224, the 
previous update time, or the registration time, is read. At step 
226, the current time that was read is compared with the 
update time or the registration time, to determine whether or 
not a predetermined time has elapsed. When the result is 
negative, and the predetermined time has not yet elapsed, 
this routine is terminated. When the result is affirmative, at 
step 230, the password update process is performed. During 
the password update process, an update execution program 
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may be stored in advance on the IC card 30 and the password 
may automatically be updated. When the IC card 30 is 
inserted into the computer system 10, an instruction signal 
may be output so that the computer system 10 starts a 

5 process that forces the updating of the password. 

Although, in this embodiment, a single user employs an 
IC card, a plurality of users can also share a single IC card. 
In this case, since the IC card has the above described 
nonvolatile RAM, the RAM in which a password is stored 

id is formed like a table to enable it to store a plurality of 
passwords therein. Then, the security for each password is 
ensured and a plurality of users can use a single IC card. 

Since the IC card in this embodiment includes a nonvola- 
tile RAM, a password updating record and an access dis- 

15 abling record can be stored. When the password updating 
record and the access disabling record are stored, such 
records can be read and a user can manage the updating of 
the password and the accessing of the computer system, i.e., 
can perform the so-called log management. 

20 As is described above, according to the present invention, 
secret information from an information processing apparatus 
and an encoding procedure are stored on an IC card. Secret 
information that is unique to the IC card, ID information, 
and a time measured by a clock are encoded in accordance 

25 with the stored encoding procedure and the results are 
output, and the information processing apparatus decodes 
them. When the decoded secret information matches secret 
information registered in advance, a mutual connection is 
authenticated. Therefore, secret information can be 

30 exchanged while ensuring that security is maintained. 
We claim: 

1. An IC card for connection to an information processing 
apparatus, comprising: 

a clock for counting time; 
35 ID storage means for storing a permanent ID; 

information storage means for storing a changeable pass- 
word to identify said IC card when said IC card is 
connected to said information processing apparatus; 
40 procedure storage means for storing a changeable cipher- 
ing program for encrypting said password; and 
control means for encrypting said password in accordance 
with said ciphering program stored in said procedure 
storage means and outputting the encrypted password 
45 to a connected information processing apparatus in 
response to a request for such encrypted password from 
the connected information processing apparatus. 

2. An authentication method, for an information process- 
ing apparatus, which employs the IC card defined in claim 

50 1 to authenticate a mutual connection between said IC card 
and said information processing apparatus, in which said 
password is registered in advance, comprising the steps of: 
transmitting the password and the ciphering program from 
said information processing apparatus to said IC card; 
55 storing the password and the ciphering program by said 
IC card; 

reading a time count of said clock; 

encrypting the time count, the password, and the ID in 
60 accordance with the stored ciphering program to pro- 
duce encrypted information; 

transmitting the encrypted information to said informa- 
tion processing apparatus; and 

deciphering the received encrypted information in accor- 
65 dance with a deciphering program that corresponds to 
the ciphering program to produce a deciphered 
password, and authenticating the connection between 
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said IC card and said information processing apparatus 
only when the deciphered password matches the pass- 
word registered in advance. 
3. The authentication method for an information process- 
ing apparatus according to claim 2, wherein the password 
and the ciphering program are altered in accordance with 
instructions from said IC card issued at periodic intervals 
that are based on the time count performed by said clock. 
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4. The IC card according to claim 1, further comprising a 
keyboard on the IC card for updating the password. 

5. The IC card as in claim 4, further comprising a display 
mounted on the IC card. 

5 6. The IC card as in claim 1, further comprising a display 
mounted on the IC card. 

* * * * * 
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